Medium
CVE-2024-6332
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2024-43986
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8274
WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-8319
Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions
Medium
CVE-2024-43985
Bus Ticket Booking with Seat Reservation <= 5.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-43923
Timetics <= 1.0.23 - Authorization Bypass
High
CVE-2024-7129
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-7647
OTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-43280
Salon booking system <= 10.8.1 - Unauthenticated Open Redirect
Medium
CVE-2024-6925
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2024-6924
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-43212
WpTravelly <= 1.7.7 - Missing Authorization
Medium
CVE-2024-43223
EventPrime <= 4.0.3.2 - Missing Authorization via calendar_event_create()
Medium
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
High
CVE-2024-43135
WPCafe <= 2.2.28 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-43138
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-7350
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
Critical
CVE-2024-39658
Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-39648
Eventin <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-6930
WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode
Medium
CVE-2024-6175
Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
Medium
CVE-2024-35761
vCita Online Booking & Scheduling Calendar <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-6660
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
High
CVE-2024-6467
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.